1 December 2020

29 results · Feed

• Medium 6.3
  CVE-2020-26250

  Base class whitelist configuration ignored in OAuthenticator

  OAuthenticator is an OAuth login mechanism for JupyterHub. In oauthenticator from version 0.12.0 and before 0.12.2, the deprecated (in jupyterhub 1.2) configuration `Authenticator.whitelist`, which should be transparently mapped to `Authenticator.allowed_user…

  jupyterhub oauthenticator oauthenticator PyPI
  Dec 1, 2020
• Unscored —
  CVE-2020-28582

  An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could all…

  Trend Micro Trend Micro Apex One Trend Micro OfficeScan
  Dec 1, 2020
• Unscored —
  CVE-2020-28583

  An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could all…

  Trend Micro Trend Micro Apex One Trend Micro OfficeScan
  Dec 1, 2020
• Unscored —
  CVE-2020-28577

  An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could all…

  Trend Micro Trend Micro Apex One Trend Micro OfficeScan
  Dec 1, 2020
• Unscored —
  CVE-2020-28575

  A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an…

  Trend Micro Trend Micro ServerProtect for Linux Linux
  Dec 1, 2020
• Unscored —
  CVE-2020-28576

  An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could all…

  Trend Micro Trend Micro Apex One Trend Micro OfficeScan
  Dec 1, 2020
• Unscored —
  CVE-2020-28573

  An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could all…

  Trend Micro Trend Micro Apex One Trend Micro OfficeScan
  Dec 1, 2020
• Unscored —
  CVE-2019-16958

  Cross-site Scripting (XSS) vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web scr…

  Dec 1, 2020
• Unscored —
  CVE-2020-8539

  Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an att…

  Dec 1, 2020
• Medium 5.4
  CVE-2020-29315

  Cross-site scripting in ThinkAdmin

  ThinkAdmin version v1 v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML.

  zoujingli/thinkadmin Packagist
  Dec 1, 2020
• Unscored —
  CVE-2020-11990 Public exploit

  We have resolved a security issue in the camera plugin that could have affected certain Cordova (Android) applications.…

  Dec 1, 2020
• Unscored —
  CVE-2020-6880

  A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending …

  Dec 1, 2020
• Unscored —
  CVE-2020-28970

  An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vul…

  Dec 1, 2020
• Unscored —
  CVE-2020-28940

  On Western Digital My Cloud OS 5 devices before 5.06.115, the NAS Admin dashboard has an authentication bypass vulnerab…

  Dec 1, 2020
• Unscored —
  CVE-2020-28971

  An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vul…

  Dec 1, 2020
• Unscored —
  CVE-2020-28993

  A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0.…

  Dec 1, 2020
• Unscored —
  CVE-2020-26762

  A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and IC-3140W (v3.07), which allows an unauthe…

  Dec 1, 2020
• Unscored —
  CVE-2020-25181

  WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that ma…

  Dec 1, 2020
• Unscored —
  CVE-2020-25177

  WECON PLC Editor Versions 1.3.8 and prior has a stack-based buffer overflow vulnerability has been identified that may …

  Dec 1, 2020
• Unscored —
  CVE-2020-7533

  CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver with…

  Dec 1, 2020
• Unscored —
  CVE-2020-7548

  A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways …

  Dec 1, 2020
• Unscored —
  CVE-2020-7547

  A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA S…

  Dec 1, 2020
• Unscored —
  CVE-2020-7546

  A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStr…

  Dec 1, 2020
• Unscored —
  CVE-2020-7545

  A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA So…

  Dec 1, 2020
• Unscored —
  CVE-2020-4128

  HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker…

  Dec 1, 2020
• High 7.5
  CVE-2020-7335

  Privilege Escalation vulnerability in McAfee Total Protection (MTP)

  Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection t…

  McAfee McAfee Total Protection (MTP)
  Dec 1, 2020
• Medium 5.2
  CVE-2020-15257 Public exploit

  containerd-shim API Exposed to Host Network Containers

  containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s AP…

  containerd containerd ctop docker.io Debian Ubuntu Alpine Wolfi Go
  Dec 1, 2020
• Unscored —
  CVE-2020-9114

  FusionCompute versions 6.3.0, 6.3.1, 6.5.0, 6.5.1 and 8.0.0 have a privilege escalation vulnerability. Due to improper …

  Dec 1, 2020
• Unscored —
  CVE-2020-9117

  HUAWEI nova 4 versions earlier than 10.0.0.165(C01E34R2P4) and SydneyM-AL00 versions earlier than 10.0.0.165(C00E66R1P5…

  Dec 1, 2020